Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Google Doc Embedder SQL Injection (2.5.16)
CVE-2014-9173
CWE-89
High
WordPress Plugin InfiniteWP Client Security Bypass (1.3.7)
-
CWE-264
High
WordPress Plugin iTwitter Multiple Vulnerabilities (0.04)
CVE-2014-9336
CWE-352
High
WordPress Plugin LayerSlider Cross-Site Request Forgery (4.6.1)
-
CWE-352
High
WordPress Plugin MailPoet Newsletters (Previous) Arbitrary File Upload (2.6.7)
CVE-2014-4726
CWE-434
High
WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Scripting (1.7.0)
CVE-2014-2040
CWE-79
High
WordPress Plugin MP3-jPlayer Multiple Cross-Site Scripting Vulnerabilities (1.8.7)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)
-
CWE-22
High
WordPress Plugin Nokia Maps & Places Cross-Site Scripting (1.6.6)
CVE-2014-1750
CWE-79
High
WordPress Plugin Print, PDF, Email by PrintFriendly Multiple Cross-Site Scripting Vulnerabilities (3.3.7)
-
CWE-79
High
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.2)
-
CWE-89
High
WordPress Plugin Search Everything SQL Injection (7.0.2)
CVE-2014-2316
CWE-89
High
WordPress Plugin Stop User Enumeration User Enumeration (1.2.4)
-
CWE-203
High
WordPress Plugin Subscribe To Comments Reloaded Multiple Vulnerabilities (140204)
CVE-2014-2274
CWE-352
High
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.3.12)
CVE-2014-10017
CWE-89
High
WordPress Plugin Widget Control Powered By Everyblock Cross-Site Scripting (1.0.1)
-
CWE-79
High
WordPress Plugin WooCommerce SagePay Direct Payment Gateway Multiple Cross-Site Scripting Vulnerabilities (0.1.6.6)
CVE-2014-4549
CWE-79
High
WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.5.8)
CVE-2013-7319
CWE-79
High
WordPress Plugin WordPress Download Manager Remote Code Execution (2.7.4)
-
CWE-94
High
WordPress Plugin WP Post to PDF Cross-Site Scripting (2.3.1)
-
CWE-79
High
WordPress Plugin WP Social Invitations Cross-Site Scripting (1.4.4.2)
CVE-2014-4597
CWE-79
High
WordPress Plugin WP Symposium Arbitrary File Upload (14.11)
CVE-2014-10021
CWE-434
High
WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Cross-Site Scripting (2.5.0)
-
CWE-79
High
WordPress Plugin Ad-minister Cross-Site Scripting (0.6)
CVE-2013-6993
CWE-79
High
WordPress Plugin Advanced Dewplayer Directory Traversal (1.2)
CVE-2013-7240
CWE-22
High
WordPress Plugin Ajax Store Locator Directory Traversal (1.2.0)
-
CWE-22
High
WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)
-
CWE-918
High
WordPress Plugin Animal Captcha Cross-Site Scripting (1.6.2)
-
CWE-79
High
WordPress Plugin Another WordPress Classifieds Cross-Site Scripting (3.3.1)
CVE-2014-9313
CWE-79
High
WordPress Plugin Appointments Scheduler Cross-Site Scripting (1.5)
CVE-2014-4579
CWE-79
High
WordPress Plugin April's Super Functions Pack Cross-Site Scripting (1.4.7)
CVE-2014-100026
CWE-79
High
WordPress Plugin AskApache Firefox Adsense Cross-Site Request Forgery (3.0)
CVE-2013-6992
CWE-352
High
WordPress Plugin Authorize.net Payment Gateway For WooCommerce Security Bypass (2.0)
-
CWE-264
High
WordPress Plugin Backup and Restore WordPress-WPBackItUp Multiple Vulnerabilities (1.9)
CVE-2014-9012
CWE-538
High
WordPress Plugin Banner Effect Header Cross-Site Request Forgery (1.2.6)
CVE-2015-0920
CWE-352
High
WordPress Plugin Bird Feeder Multiple Vulnerabilities (1.2.3)
CVE-2014-9334
CWE-352
High
WordPress Plugin Blogroll Fun-Show Last Post and Last Update Time Cross-Site Scripting (0.8.4)
-
CWE-79
High
WordPress Plugin Broadcast Live Video-Live Streaming:HTML5, WebRTC, HLS, RTSP, RTMP Cross-Site Scripting (4.27.2)
CVE-2014-4569
CWE-79
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.1)
-
CWE-79
High
WordPress Plugin Broken Link Checker Multiple Cross-Site Scripting Vulnerabilities (1.9.1)
-
CWE-79
High
WordPress Plugin CAPTCHA in Thai Multiple Cross-Site Scripting Vulnerabilities (1.1)
-
CWE-79
High
WordPress Plugin Cart66 Lite::WordPress Ecommerce Multiple Vulnerabilities (1.5.3)
CVE-2014-9442
CWE-264
High
WordPress Plugin cformsII Arbitrary File Upload (14.7)
CVE-2014-9473
CWE-434
High
WordPress Plugin CIP4 Folder Download Widget Local File Inclusion (1.10)
-
CWE-22
High
WordPress Plugin ClickSold IDX Cross-Site Scripting (1.48)
-
CWE-79
High
WordPress Plugin Clipta Video Informer Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Contact Form 7 Cross-Site Scripting (4.0.1)
-
CWE-79
High
WordPress Plugin Contact Form by ContactMe.com Cross-Site Scripting (2.3)
CVE-2014-4518
CWE-79
High
WordPress Plugin Contact Form DB Cross-Site Scripting (2.8.19)
-
CWE-79
High
WordPress Plugin Contentboxes Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Coupon Tab for DirectoryPress Multiple Cross-Site Scripting Vulnerabilities (0.2.0)
-
CWE-79
High
WordPress Plugin Cross-RSS Directory Traversal (1.7)
CVE-2014-4941
CWE-22
High
WordPress Plugin Custom Website Data Cross-Site Request Forgery (1.2)
-
CWE-352
High
WordPress Plugin Daily Inspiration Generator Cross-Site Scripting (2.0)
-
CWE-79
High
WordPress Plugin Daily Inspiration Generator Open Redirect (2.0)
-
CWE-601
High
WordPress Plugin DandyID Services Cross-Site Request Forgery (1.5.9)
CVE-2014-9335
CWE-352
High
WordPress Plugin DB Backup Directory Traversal (4.5)
CVE-2014-9119
CWE-22
High
WordPress Plugin Duo Two-Factor Authentication Security Bypass (1.8.1)
-
CWE-592
High
WordPress Plugin DZS Video Gallery Information Disclosure (3.1.3)
-
CWE-200
High
WordPress Plugin ENL Newsletter SQL Injection (1.0.1)
CVE-2014-4939
CWE-89
High
WordPress Plugin Facebook Like Box Cross-Site Request Forgery (2.8.2)
CVE-2014-9524
CWE-352
High
WordPress Plugin Fancy Cats Multiple Cross-Site Scripting Vulnerabilities (1.1)
-
CWE-79
High
WordPress Plugin Filtre de Surveillance Gouvernemental Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Fixedly Media Gallery Cross-Site Scripting (1.3.1)
-
CWE-79
High
WordPress Plugin Flog Server-Side Request Forgery (1.0beta3)
-
CWE-918
High
WordPress Plugin Foliopress WYSIWYG Cross-Site Scripting (2.6.8.4)
CVE-2014-1232
CWE-79
High
WordPress Plugin Frontend Uploader Cross-Site Scripting (0.9.2)
CVE-2014-9444
CWE-79
High
WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Multiple Cross-Site Scripting Vulnerabilities (0.4.3)
-
CWE-79
High
WordPress Plugin Garee's Flickr Feed Multiple Cross-Site Scripting Vulnerabilities (0.8)
-
CWE-79
High
WordPress Plugin GB Team Stats Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin Geo Mashup Cross-Site Scripting (1.8.2)
CVE-2015-1383
CWE-79
High
WordPress Plugin Google Map Generator Cross-Site Scripting (1.3.1)
-
CWE-79
High
WordPress Plugin Google Maps in Posts Cross-Site Scripting (1.5.3)
-
CWE-79
High
WordPress Plugin gSlideShow Cross-Site Request Forgery (0.1)
CVE-2014-9391
CWE-352
High
WordPress Plugin Hunk External Links Cross-Site Scripting (3.0.5)
-
CWE-79
High